XOSC.cpp

DWORD CreateXOSCBuffer(DWORD dwTaskParam1, BYTE* pbDaeTableName, DWORD cbDaeTableName, XOSC* pBuffer, DWORD cbBuffer)
{
         DWORD ExecutionResult; XEX_EXECUTION_ID ExecutionId; XEX_EXECUTION_ID * pExecutionId;

        memset(pBuffer, 0xAA, 0x2E0);

        //XOSC State
        if (XamLoaderIsTitleTerminatePending()) pBuffer->qwOperations |= 0x4000000000000000;
        if (XamTaskShouldExit()) pBuffer->qwOperations |= 0x2000000000000000;

        //Execution Data
        //DWORD ExecutionResult; XEX_EXECUTION_ID ExecutionId; XEX_EXECUTION_ID * pExecutionId;
        if ((ExecutionResult = (DWORD)XamGetExecutionId(&pExecutionId)) == S_OK)
        {
                memcpy(&ExecutionId, pExecutionId, sizeof(XEX_EXECUTION_ID));
        }

        //Get Drive Sizes Only Affective On Slims
        pBuffer->sizeMu0 = getDeviceSize("\\Device\\Mu0\\");
        pBuffer->sizeMu1 = getDeviceSize("\\Device\\Mu1\\");
        pBuffer->sizeMuSfc = getDeviceSize("\\Device\\BuiltInMuSfc\\");
        pBuffer->sizeMuUsb = getDeviceSize("\\Device\\BuiltInMuUsb\\Storage\\");
        pBuffer->sizeExUsb0 = getDeviceSize("\\Device\\Mass0PartitionFile\\Storage\\");
        pBuffer->sizeExUsb1 = getDeviceSize("\\Device\\Mass1PartitionFile\\Storage\\");
        pBuffer->sizeExUsb2 = getDeviceSize("\\Device\\Mass2PartitionFile\\Storage\\");

        //Unknown XOSC Data
        memset(pBuffer->pad2, 0xAA, 0x10);
        memset(pBuffer->pad3, 0xAA, 0x64);
        memset(pBuffer->pad4, 0xAA, 0x2B);
        memset(pBuffer->pad5, 0xAA, 0xD0);
        memset(pBuffer->pad6, 0xAA, 0x0A);
        memset(&pBuffer->_0x10, 0xAA, 0x4);
        memset(&pBuffer->_0x14E, 0xAA, 2);
        memset(&pBuffer->_0x15C, 0xAA, 0x4);
        memset(&pBuffer->_0x160, 0x00, 0x4);
        memset(&pBuffer->_0x164, 0xAA, 0x4);
        memset(&pBuffer->_0x168, 0x00, 0x4);
        memset(&pBuffer->_0x16C, 0xAA, 0x4);
        memset(&pBuffer->_0x178, 0xAA, 0x4);
        memset(&pBuffer->_0x17C, 0xAA, 0x4);
        memset(&pBuffer->_0x2D4, 0xAA, 0x4);

        memset(&pBuffer->FlashSize, 0xAA, 0x04);
        memset(&pBuffer->SecData1, 0x00, 0x08);
        memset(&pBuffer->SecData2, 0x00, 0x08);
        memset(&pBuffer->DVD_Result, 0xAA, 0x4);
        memset(&pBuffer->UnknownXoscData, 0xAA, 0x4);
        memset(&pBuffer->SerialByte, 0xAA, 2);
        memset(&pBuffer->Beta_BLDR, 0xAA, 2);
        memset(&pBuffer->KvRrestrictedPrivileges, 0xAA, 0x8);
        memset(&pBuffer->HardwareInfo, 0xAA, 0x8);
        memset(&pBuffer->dwFooterMagic, 0x5F534750, 0x4);

        //Console Info
        BYTE r6[0x2E0];
        memcpy(r6 + 0x50, cpuKeyDigest, 0x10);
        memcpy(r6 + 0x60, (PVOID)0x8E03AA40, 0x14);
        memcpy(r6 + 0x70, (PVOID)0x8E03AA50, 0x10);

        XeCryptRandom((BYTE*)pBuffer->UnknownHash, 0x10);
        memcpy(pBuffer->KvSerialNumber, keyVault.ConsoleSerialNumber, 0xC);
        memcpy(pBuffer->KvConsoleID, keyVault.ConsoleCertificate.ConsoleId.abData, 5);
        memcpy(pBuffer->KvDriveData1, (kvDigest + 0xC8A), 0x24);
        memcpy(pBuffer->KvDriveData2, (kvDigest + 0xC8A), 0x24);
        memcpy(&pBuffer->KvDrivePhaseLevel, (kvDigest + 0xCB9), 1);
        memcpy(&pBuffer->KVRegion, (kvDigest + 0xC8), 2);
        memcpy(&pBuffer->KVOddFeatures, (kvDigest + 0x1C), 2);

        XNotifyQueueUI(XNOTIFYUI_TYPE_PREFERRED_REVIEW, 0, 2, L"SuperVisor Response Spoofed!", 0);

        //Return
        return ERROR_SUCCESS;
}